Home » ZyXEL Manuals » Networking » ZyXEL VMG1312-B30A » Manual Viewer

ZyXEL VMG1312-B30A User Guide - Page 222

The DoS Screen

Get ZyXEL VMG1312-B30A PDF manuals and user guides

Add to My Manuals
Save this manual to your list of manuals

Page 222 highlights

Chapter 15 Firewall Table 76 Access Control: Add/Edit (continued) LABEL IP Type Select Protocol DESCRIPTION Select whether your IP type is IPv4 or IPv6. Select the transport layer protocol that defines your customized port from the drop-down list box. The specific protocol rule sets you add in the Security > Firewall > Service > Add screen display in this list. Protocol If you want to configure a customized protocol, select Specific Service. This field is displayed only when you select Specific Protocol in Select Protocol. Choose the IP port (TCP/UDP, TCP, UDP, ICMP, or ICMPv6) that defines your customized port from the drop-down list box. Custom Source This field is displayed only when you select Specific Protocol in Select Protocol. Port Enter a single port number or the range of port numbers of the source. Custom This field is displayed only when you select Specific Protocol in Select Protocol. Destination Port Enter a single port number or the range of port numbers of the destination. Policy Use the drop-down list box to select whether to discard (DROP), deny and send an ICMP destination-unreachable message to the sender of (REJECT) or allow the passage of (ACCEPT) packets that match this rule. Direction Use the drop-down list box to select the direction of traffic to which this rule applies. Enable Rate Limit Select this check box to set a limit on the upstream/downstream transmission rate for the specified protocol. Specify how many packets per minute or second the transmission rate is. Scheduler Rules Select a schedule rule for this ACL rule form the drop-down list box. You can configure a new schedule rule by click Add New Rule. This will bring you to the Security > Scheduler Rules screen. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. 15.5 The DoS Screen DoS (Denial of Service) attacks can flood your Internet connection with invalid packets and connection requests, using so much bandwidth and so many resources that Internet access becomes unavailable. Use the DoS screen to activate protection against DoS attacks. Click Security > Firewall > DoS to display the following screen. Figure 105 Security > Firewall > DoS 222 VMG1312-B Series User's Guide

Section	Page
VMG1312-B Series	1
Contents Overview	3
Table of Contents	5
User’s Guide	15
Introducing the Device	17
1.1 Overview	17
1.2 Ways to Manage the Device	17
1.3 Good Habits for Managing the Device	17
1.4 Applications for the Device	18
1.4.1 Internet Access	18
1.4.2 Device’s USB Support	19
1.5 LEDs (Lights)	20
1.6 The RESET Button	21
1.7 Wireless Access	21
1.7.1 Using the WLAN/WPS Button	22
The Web Configurator	23
2.1 Overview	23
2.1.1 Accessing the Web Configurator	23
2.2 Web Configurator Layout	25
2.2.1 Title Bar	25
2.2.2 Main Window	26
2.2.3 Navigation Panel	26
Quick Start	31
3.1 Overview	31
3.2 Quick Start Setup	31
Tutorials	33
4.1 Overview	33
4.2 Setting Up an ADSL PPPoE Connection	33
4.3 Setting Up a Secure Wireless Network	36
4.3.1 Configuring the Wireless Network Settings	36
4.3.2 Using WPS	38
4.3.3 Without WPS	41
4.4 Setting Up Multiple Wireless Groups	42
4.5 Configuring Static Route for Routing to Another Network	45
4.6 Configuring QoS Queue and Class Setup	48
4.7 Access the Device Using DDNS	51
4.7.1 Registering a DDNS Account on www.dyndns.org	51
4.7.2 Configuring DDNS on Your Device	52
4.7.3 Testing the DDNS Setting	52
4.8 Configuring the MAC Address Filter	53
4.9 Access Your Shared Files From a Computer	54
4.10 Using the Media Server Feature	55
4.10.1 Configuring the Device	55
4.10.2 Using Windows Media Player	55
4.10.3 Using a Digital Media Adapter	58
4.11 Using the Print Server Feature	60
Technical Reference	75
Network Map and Status Screens	77
5.1 Overview	77
5.2 The Network Map Screen	77
5.3 The Status Screen	78
Broadband	81
6.1 Overview	81
6.1.1 What You Can Do in this Chapter	81
6.1.2 What You Need to Know	82
6.1.3 Before You Begin	84
6.2 The Broadband Screen	84
6.2.1 Add/Edit Internet Connection	85
6.3 The 3G Backup Screen	92
6.4 The Advanced Screen	96
6.5 The 8021x Screen	97
6.5.1 Edit 802.1x Settings	98
6.6 Technical Reference	98
Wireless	105
7.1 Overview	105
7.1.1 What You Can Do in this Chapter	105
7.1.2 What You Need to Know	106
7.2 The General Screen	106
7.2.1 No Security	108
7.2.2 Basic (WEP Encryption)	109
7.2.3 More Secure (WPA(2)-PSK)	111
7.2.4 WPA(2) Authentication	112
7.3 The More AP Screen	113
7.3.1 Edit More AP	114
7.4 MAC Authentication	115
7.5 The WPS Screen	116
7.6 The WMM Screen	118
7.7 The WDS Screen	119
7.7.1 WDS Scan	120
7.8 The Others Screen	121
7.9 The Channel Status Screen	123
7.10 Technical Reference	123
7.10.1 Wireless Network Overview	123
7.10.2 Additional Wireless Terms	125
7.10.3 Wireless Security Overview	125
7.10.4 Signal Problems	127
7.10.5 BSS	128
7.10.6 MBSSID	128
7.10.7 Preamble Type	129
7.10.8 Wireless Distribution System (WDS)	129
7.10.9 WiFi Protected Setup (WPS)	129
Home Networking	137
8.1 Overview	137
8.1.1 What You Can Do in this Chapter	137
8.1.2 What You Need To Know	138
8.1.3 Before You Begin	139
8.2 The LAN Setup Screen	139
8.3 The Static DHCP Screen	142
8.4 The UPnP Screen	144
8.5 Installing UPnP in Windows Example	145
8.6 Using UPnP in Windows XP Example	147
8.7 The Additional Subnet Screen	153
8.8 The STB Vendor ID Screen	154
8.9 The LAN VLAN Screen	155
8.10 Technical Reference	155
8.10.1 LANs, WANs and the Device	156
8.10.2 DHCP Setup	156
8.10.3 DNS Server Addresses	156
8.10.4 LAN TCP/IP	157
Routing	159
9.1 Overview	159
9.1.1 What You Can Do in this Chapter	159
9.2 The Routing Screen	160
9.2.1 Add/Edit Static Route	161
9.3 The Policy Forwarding Screen	161
9.3.1 Add/Edit Policy Forwarding	163
Quality of Service (QoS)	165
10.1 Overview	165
10.1.1 What You Can Do in this Chapter	165
10.2 What You Need to Know	166
10.3 The Quality of Service General Screen	167
10.4 The Queue Setup Screen	168
10.4.1 Adding a QoS Queue	170
10.5 The Class Setup Screen	170
10.5.1 Add/Edit QoS Class	172
10.6 The QoS Policer Setup Screen	175
10.6.1 Add/Edit a QoS Policer	176
10.7 The QoS Monitor Screen	177
10.8 Technical Reference	178
Network Address Translation (NAT)	183
11.1 Overview	183
11.1.1 What You Can Do in this Chapter	183
11.1.2 What You Need To Know	183
11.2 The Port Forwarding Screen	184
11.2.1 Add/Edit Port Forwarding	186
11.3 The Applications Screen	187
11.3.1 Add New Application	188
11.4 The Port Triggering Screen	188
11.4.1 Add/Edit Port Triggering Rule	190
11.5 The DMZ Screen	191
11.6 The ALG Screen	192
11.7 The Address Mapping Screen	192
11.7.1 Add/Edit Address Mapping Rule	193
11.8 Technical Reference	194
11.8.1 NAT Definitions	194
11.8.2 What NAT Does	195
11.8.3 How NAT Works	196
11.8.4 NAT Application	197
Dynamic DNS Setup	199
12.1 Overview	199
12.1.1 What You Can Do in this Chapter	199
12.1.2 What You Need To Know	200
12.2 The DNS Entry Screen	200
12.2.1 Add/Edit DNS Entry	201
12.3 The Dynamic DNS Screen	201
Interface Group	203
13.1 Overview	203
13.1.1 What You Can Do in this Chapter	203
13.2 The Interface Group Screen	203
13.2.1 Interface Group Configuration	204
13.2.2 Interface Grouping Criteria	206
USB Service	209
14.1 Overview	209
14.1.1 What You Can Do in this Chapter	209
14.1.2 What You Need To Know	209
14.2 The File Sharing Screen	210
14.2.1 Before You Begin	211
14.3 The Media Server Screen	212
14.4 The Printer Server Screen	213
14.4.1 Before You Begin	213
Firewall	215
15.1 Overview	215
15.1.1 What You Can Do in this Chapter	215
15.1.2 What You Need to Know	216
15.2 The Firewall Screen	217
15.3 The Service Screen	217
15.3.1 Add/Edit a Service	218
15.4 The Access Control Screen	219
15.4.1 Add/Edit an ACL Rule	221
15.5 The DoS Screen	222
MAC Filter	225
16.1 Overview	225
16.2 The MAC Filter Screen	225
Parental Control	227
17.1 Overview	227
17.2 The Parental Control Screen	227
17.2.1 Add/Edit a Parental Control Rule	228
Scheduler Rules	231
18.1 Overview	231
18.2 The Scheduler Rules Screen	231
18.2.1 Add/Edit a Schedule	232
Certificates	233
19.1 Overview	233
19.1.1 What You Can Do in this Chapter	233
19.2 What You Need to Know	233
19.3 The Local Certificates Screen	234
19.3.1 Create Certificate Request	235
19.3.2 Load Signed Certificate	236
19.4 The Trusted CA Screen	237
19.4.1 View Trusted CA Certificate	238
19.4.2 Import Trusted CA Certificate	239
Log	241
20.1 Overview	241
20.1.1 What You Can Do in this Chapter	241
20.1.2 What You Need To Know	241
20.2 The System Log Screen	242
20.3 The Security Log Screen	243
Traffic Status	245
21.1 Overview	245
21.1.1 What You Can Do in this Chapter	245
21.2 The WAN Status Screen	245
21.3 The LAN Status Screen	247
ARP Table	249
22.1 Overview	249
22.1.1 How ARP Works	249
22.2 ARP Table Screen	249
Routing Table	251
23.1 Overview	251
23.2 The Routing Table Screen	251
IGMP Status	253
24.1 Overview	253
24.2 The IGMP Group Status Screen	253
xDSL Statistics	255
25.1 The xDSL Statistics Screen	255
User Account	259
26.1 Overview	259
26.2 The User Account Screen	259
Remote Management	261
27.1 Overview	261
27.2 The Remote MGMT Screen	261
TR-069 Client	263
28.1 Overview	263
28.2 The TR-069 Client Screen	263
TR-064	265
29.1 Overview	265
29.2 The TR-064 Screen	265
Time Settings	267
30.1 Overview	267
30.2 The Time Screen	267
E-mail Notification	271
31.1 Overview	271
31.2 The Email Notification Screen	271
31.2.1 Email Notification Edit	272
Logs Setting	273
32.1 Overview	273
32.2 The Log Settings Screen	273
32.2.1 Example E-mail Log	274
Firmware Upgrade	277
33.1 Overview	277
33.2 The Firmware Screen	277
Configuration	279
34.1 Overview	279
34.2 The Configuration Screen	279
34.3 The Reboot Screen	281
Diagnostic	282
35.1 Overview	282
35.1.1 What You Can Do in this Chapter	282
35.2 What You Need to Know	282
35.3 Ping & TraceRoute & NsLookup	283
35.4 802.1ag	284
35.5 OAM Ping Test	285
Troubleshooting	287
36.1 Power, Hardware Connections, and LEDs	287
36.2 Device Access and Login	288
36.3 Internet Access	290
36.4 Wireless Internet Access	291
36.5 USB Device Connection	292
36.6 UPnP	292
Setting up Your Computer’s IP Address	295
IP Addresses and Subnetting	317
Pop-up Windows, JavaScripts and Java Permissions	325
Wireless LANs	335
IPv6	349
Services	357
Legal Information	361

Match case Limit results 1 per page

Chapter 15 Firewall

VMG1312-B Series User’s Guide

222

15.5

The DoS Screen

DoS (Denial of Service) attacks can flood your Internet connection with invalid packets and

connection requests, using so much bandwidth and so many resources that Internet access

becomes unavailable.

Use the

DoS

screen to activate protection against DoS attacks. Click

Security > Firewall > DoS

to display the following screen.

Figure 105

Security > Firewall > DoS

IP Type

Select whether your IP type is

IPv4

IPv6

Select Protocol

Select the transport layer protocol that defines your customized port from the drop-down

list box. The specific protocol rule sets you add in the

Security > Firewall > Service >

Add

screen display in this list.

If you want to configure a customized protocol, select

Specific Service

Protocol

This field is displayed only when you select

Specific Protocol

Select Protocol

Choose the IP port (

TCP/UDP

TCP

UDP

ICMP

, or

ICMPv6

) that defines your customized

port from the drop-down list box.

Custom Source

Port

This field is displayed only when you select

Specific Protocol

Select Protocol

Enter a single port number or the range of port numbers of the source.

Custom

Destination Port

This field is displayed only when you select

Specific Protocol

Select Protocol

Enter a single port number or the range of port numbers of the destination.

Policy

Use the drop-down list box to select whether to discard (

DROP

), deny and send an ICMP

destination-unreachable message to the sender of (

REJECT

) or allow the passage of

(

) packets that match this rule.

Direction

Use the drop-down list box to select the direction of traffic to which this rule applies.

Enable Rate

Limit

Select this check box to set a limit on the upstream/downstream transmission rate for the

specified protocol.

Specify how many packets per minute or second the transmission rate is.

Scheduler Rules

Select a schedule rule for this ACL rule form the drop-down list box. You can configure a

new schedule rule by click

Add New Rule

. This will bring you to the

Security > Scheduler

Rules

screen.

Apply

Click

Apply

to save your changes.

Cancel

Click

Cancel

to exit this screen without saving.

Table 76

Access Control: Add/Edit (continued)

LABEL

DESCRIPTION